@yawlabs/tailscale-mcp

What changed

Changed between 6 October 2026 and 10 October 2026 (first seen 2026-10-10 12:34 UTC)

17 descriptions rewritten, 22 schema or annotation changes with the description left byte-identical.

--- pinned/tailscale_approve_user
+++ observed/tailscale_approve_user
  {
    "annotations": {
      "destructiveHint": false,
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_batch_update_posture_attributes
+++ observed/tailscale_batch_update_posture_attributes
  {
    "annotations": {
      "destructiveHint": false,
-   "description": "Batch update custom posture attributes across multiple devices. Each attribute key must start with 'custom:'. Uses JSON Merge Patch semantics — pass null as the attribute config to delete.",
+   "description": "Batch update custom posture attributes across multiple devices. Each attribute key must start with 'custom:'. Uses JSON Merge Patch semantics -- pass null as the attribute config to delete.",
    "execution": {
      "taskSupport": "forbidden"
    },

--- pinned/tailscale_create_device_invite
+++ observed/tailscale_create_device_invite
  {
    "annotations": {
      "destructiveHint": false,
+         "minLength": 1,
          "type": "string"
        },
        "email": {

--- pinned/tailscale_create_key
+++ observed/tailscale_create_key
  {
    "annotations": {
      "destructiveHint": false,
-         "type": "number"
+         "exclusiveMinimum": 0,
+         "maximum": 9007199254740991,
+         "type": "integer"
        },
        "issuer": {
          "description": "(federated only) OIDC issuer URL (e.g. 'https://token.actions.githubusercontent.com')",

--- pinned/tailscale_delete_device
+++ observed/tailscale_delete_device
  {
    "annotations": {
      "destructiveHint": true,
-   "description": "Permanently remove a device from the tailnet. This is irreversible — the device must re-authenticate to rejoin.",
+   "description": "Permanently remove a device from the tailnet. This is irreversible -- the device must re-authenticate to rejoin.",
    "execution": {
      "taskSupport": "forbidden"
    },
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_delete_device_invite
+++ observed/tailscale_delete_device_invite
  {
    "annotations": {
      "destructiveHint": true,
-   "description": "Delete a device invite. This is irreversible — the invite link will stop working.",
+   "description": "Delete a device invite. This is irreversible -- the invite link will stop working.",
    "execution": {
      "taskSupport": "forbidden"
    },
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_delete_key
+++ observed/tailscale_delete_key
  {
    "annotations": {
      "destructiveHint": true,
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_delete_posture_integration
+++ observed/tailscale_delete_posture_integration
  {
    "annotations": {
      "destructiveHint": true,
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_delete_service
+++ observed/tailscale_delete_service
  {
    "annotations": {
      "destructiveHint": true,
-   "description": "Delete a Tailscale Service. This is irreversible — the service's MagicDNS name and virtual IP will be released.",
+   "description": "Delete a Tailscale Service. This is irreversible -- the service's MagicDNS name and virtual IP will be released.",
    "execution": {
      "taskSupport": "forbidden"
    },
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_delete_user
+++ observed/tailscale_delete_user
  {
    "annotations": {
      "destructiveHint": true,
-   "description": "Delete a user from the tailnet. This is irreversible — the user and all their devices will be removed.",
+   "description": "Delete a user from the tailnet. This is irreversible -- the user and all their devices will be removed.",
    "execution": {
      "taskSupport": "forbidden"
    },
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_delete_user_invite
+++ observed/tailscale_delete_user_invite
  {
    "annotations": {
      "destructiveHint": true,
-   "description": "Delete a user invite. This is irreversible — the invite link will stop working.",
+   "description": "Delete a user invite. This is irreversible -- the invite link will stop working.",
    "execution": {
      "taskSupport": "forbidden"
    },
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_delete_webhook
+++ observed/tailscale_delete_webhook
  {
    "annotations": {
      "destructiveHint": true,
-   "description": "Delete a webhook. This is irreversible — the webhook secret cannot be recovered.",
+   "description": "Delete a webhook. This is irreversible -- the webhook secret cannot be recovered.",
    "execution": {
      "taskSupport": "forbidden"
    },
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_diff_acl_access
+++ observed/tailscale_diff_acl_access
  {
    "_meta": {
      "anthropic/maxResultSizeChars": 500000
-   "description": "Answer 'who loses access?' before applying an ACL change. Compares the CURRENT policy against a proposed one and reports, per user, which destinations they gain and lose. Run this before tailscale_update_acl -- validate_acl only checks syntax and the policy's own tests block, so a policy with no tests validates clean while revoking everyone. LIMITS, all reported in the response rather than left to be discovered. It compares USER principals only, so a revocation that runs through a tag or group can show a clean diff, and an empty result is never proof a change is safe. Posture DEFINITION changes ARE detected: posture names are resolved to their rules, so tightening `posture:corp` shows as a change -- except when a preview omits the definitions map, where it falls back to comparing names. It costs two preview requests per user, so it checks the first 25 by default and stops after 60 seconds regardless; either way it sets `truncated`, reports how many were skipped, and says which limit stopped it. Users whose preview fails are listed in `failed` and excluded from the compared count -- a failure is never reported as lost access, and if nothing could be compared the call fails rather than returning an empty diff.",
+   "description": "Answer 'who loses access?' before applying an ACL change. Compares the CURRENT policy against a proposed one and reports, per user, which destinations they gain and lose. Run this before tailscale_update_acl -- validate_acl only checks syntax and the policy's own tests block, so a policy with no tests validates clean while revoking everyone. LIMITS, all reported in the response rather than left to be discovered. It compares USER principals only, so a revocation that runs through a tag or group can show a clean diff, and an empty result is never proof a change is safe. Posture DEFINITION changes ARE detected: posture names are resolved to their rules, so tightening `posture:corp` shows as a change -- except when a preview omits the definitions map, where it falls back to comparing names. It costs two preview requests per user, so it checks the first 25 by default and stops starting new users after 60 seconds (a user whose previews are already in flight still finishes); either way it sets `truncated`, reports how many were skipped, and says which limit stopped it. Users whose preview fails are listed in `failed` and excluded from the compared count -- a failure is never reported as lost access, and if nothing could be compared the call fails rather than returning an empty diff.",
    "execution": {
      "taskSupport": "forbidden"
    },

--- pinned/tailscale_get_acl
+++ observed/tailscale_get_acl
  {
    "_meta": {
      "anthropic/maxResultSizeChars": 500000
-   "description": "Get the current ACL policy for your tailnet. Returns the raw policy text with original formatting preserved, including comments and trailing commas (HuJSON). Also returns an ETag — you must pass it to tailscale_update_acl to safely update the policy.",
+   "description": "Get the current ACL policy for your tailnet. Returns the raw policy text with original formatting preserved, including comments and trailing commas (HuJSON). Also returns an ETag -- you must pass it to tailscale_update_acl to safely update the policy.",
    "execution": {
      "taskSupport": "forbidden"
    },

--- pinned/tailscale_get_device_invite
+++ observed/tailscale_get_device_invite
  {
    "annotations": {
      "destructiveHint": false,
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_get_key
+++ observed/tailscale_get_key
  {
    "annotations": {
      "destructiveHint": false,
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_get_network_flow_logs
+++ observed/tailscale_get_network_flow_logs
  {
    "_meta": {
      "anthropic/maxResultSizeChars": 500000
-   "description": "Get network traffic flow logs showing connections between devices. Shows source/destination nodes, timestamps, and traffic metadata — useful for security monitoring and debugging connectivity.",
+   "description": "Get network traffic flow logs showing connections between devices. Shows source/destination nodes, timestamps, and traffic metadata -- useful for security monitoring and debugging connectivity.",
    "execution": {
      "taskSupport": "forbidden"
    },

--- pinned/tailscale_get_posture_integration
+++ observed/tailscale_get_posture_integration
  {
    "annotations": {
      "destructiveHint": false,
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_get_user
+++ observed/tailscale_get_user
  {
    "annotations": {
      "destructiveHint": false,
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_get_user_invite
+++ observed/tailscale_get_user_invite
  {
    "annotations": {
      "destructiveHint": false,
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_get_webhook
+++ observed/tailscale_get_webhook
  {
    "annotations": {
      "destructiveHint": false,
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_list_device_invites
+++ observed/tailscale_list_device_invites
  {
    "annotations": {
      "destructiveHint": false,
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_list_services
+++ observed/tailscale_list_services
  {
    "annotations": {
      "destructiveHint": false,
-   "description": "List all Tailscale Services in your tailnet. Services provide stable MagicDNS names and virtual IPs, decoupled from individual devices. Note: services are created implicitly when a node first advertises one (`tailscale up --advertise-services=svc:name`); there is no API endpoint to create a service from this MCP. Use the update/delete/approval tools here once the service exists.",
+   "description": "List all Tailscale Services in your tailnet. Services provide stable MagicDNS names and virtual IPs, decoupled from individual devices. Note: this MCP has no create-service tool. The API documents its Service PUT as create-or-update, but tailscale_update_service sends only the fields you pass, so do not use it to create one. Use the update/delete/approval tools here once the service exists.",
    "execution": {
      "taskSupport": "forbidden"
    },

--- pinned/tailscale_resend_device_invite
+++ observed/tailscale_resend_device_invite
  {
    "annotations": {
      "destructiveHint": false,
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_resend_user_invite
+++ observed/tailscale_resend_user_invite
  {
    "annotations": {
      "destructiveHint": false,
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_restore_user
+++ observed/tailscale_restore_user
  {
    "annotations": {
      "destructiveHint": false,
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_rotate_webhook_secret
+++ observed/tailscale_rotate_webhook_secret
  {
    "annotations": {
      "destructiveHint": false,
-   "description": "Rotate a webhook's secret. Returns the new secret — save it immediately, as it cannot be retrieved again. The old secret is immediately invalidated.\n\nSECURITY: the response body contains the secret verbatim. MCP clients commonly persist tool responses to logs and conversation transcripts; treat this response as sensitive.",
+   "description": "Rotate a webhook's secret. Returns the new secret -- save it immediately, as it cannot be retrieved again. The old secret is immediately invalidated.\n\nSECURITY: the response body contains the secret verbatim. MCP clients commonly persist tool responses to logs and conversation transcripts; treat this response as sensitive.",
    "execution": {
      "taskSupport": "forbidden"
    },
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_set_device_routes
+++ observed/tailscale_set_device_routes
  {
    "annotations": {
      "destructiveHint": true,
-   "description": "Set the enabled subnet routes for a device. Replaces all currently enabled routes — pass the full list of routes you want enabled.",
+   "description": "Set the enabled subnet routes for a device. Replaces all currently enabled routes -- pass the full list of routes you want enabled.",
    "execution": {
      "taskSupport": "forbidden"
    },

--- pinned/tailscale_set_device_tags
+++ observed/tailscale_set_device_tags
  {
    "annotations": {
      "destructiveHint": true,
-   "description": "Set ACL tags on a device. Replaces all existing tags — pass the full list of tags you want applied.",
+   "description": "Set ACL tags on a device. Replaces all existing tags -- pass the full list of tags you want applied.",
    "execution": {
      "taskSupport": "forbidden"
    },

--- pinned/tailscale_set_devices_authorized
+++ observed/tailscale_set_devices_authorized
  {
    "annotations": {
      "destructiveHint": true,
-   "description": "Authorize or deauthorize multiple devices in one call. Each device's POST runs in parallel; per-device errors are returned alongside the successes so a partial failure doesn't lose the work that succeeded. On partial failure the call still returns success (ok) with data: { authorized, succeeded, failed } -- inspect data.failed for the per-device errors. Common use: authorize a batch of newly-enrolled CI hosts, or deauthorize a group of devices flagged by a security review.",
+   "description": "Authorize or deauthorize multiple devices in one call. Each device's POST runs in parallel; per-device errors are returned alongside the successes so a partial failure doesn't lose the work that succeeded. On partial failure the call still returns success (ok) with data: { authorized, succeeded, failed } -- inspect data.failed for the per-device errors. POSTs are never retried, so on a large batch a rate-limited device lands in data.failed with status 429: re-call with just those ids, or set TAILSCALE_MAX_CONCURRENT to cap requests in flight. Common use: authorize a batch of newly-enrolled CI hosts, or deauthorize a group of devices flagged by a security review.",
    "execution": {
      "taskSupport": "forbidden"
    },

--- pinned/tailscale_set_dns_configuration
+++ observed/tailscale_set_dns_configuration
  {
    "annotations": {
      "destructiveHint": true,
-   "description": "Set the unified DNS configuration for your tailnet in a single call. Replaces all DNS settings (nameservers, search paths, split DNS, MagicDNS preference).",
+   "description": "Set the unified DNS configuration for your tailnet in a single call. Replaces all DNS settings (nameservers, search paths, split DNS, MagicDNS preference). This is a replace-all endpoint: pass every top-level field you want to keep, because a field you omit may be cleared rather than left alone.",
    "execution": {
      "taskSupport": "forbidden"
    },
-           "items": {
-             "type": "string"
-           },
-           "type": "array"
+           "anyOf": [
+             {
+               "items": {
+                 "type": "string"
+               },
+               "type": "array"
+             },
+             {
+               "type": "null"
+             }
+           ]
          },
-         "description": "Map of domain to nameserver list for split DNS",
+         "description": "Map of domain to nameserver list for split DNS, or to null to clear that domain",
          "propertyNames": {
            "type": "string"
          },

--- pinned/tailscale_set_log_stream_config
+++ observed/tailscale_set_log_stream_config
  {
    "annotations": {
      "destructiveHint": false,
-         "description": "Destination URL (required for non-s3 destinations)",
+         "description": "Destination URL (required for non-s3 destinations; for s3, an optional S3-compatible endpoint)",
          "type": "string"
        },
        "user": {

--- pinned/tailscale_suspend_user
+++ observed/tailscale_suspend_user
  {
    "annotations": {
      "destructiveHint": true,
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_test_webhook
+++ observed/tailscale_test_webhook
  {
    "annotations": {
      "destructiveHint": false,
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_update_key
+++ observed/tailscale_update_key
  {
    "annotations": {
      "destructiveHint": false,
-   "description": "Update an existing key. Supported fields depend on the key type: all key types accept 'description'; OAuth clients and federated identities additionally accept 'scopes' and 'tags'; federated identities additionally accept 'issuer', 'subject', 'audience', and 'customClaimRules'. For auth keys, pass only 'description' — the Tailscale API will reject other fields.",
+   "description": "Update an existing key. Supported fields depend on the key type: all key types accept 'description'; OAuth clients and federated identities additionally accept 'scopes' and 'tags'; federated identities additionally accept 'issuer', 'subject', 'audience', and 'customClaimRules'. For auth keys, pass only 'description' -- the Tailscale API will reject other fields.",
    "execution": {
      "taskSupport": "forbidden"
    },
+         "minLength": 1,
          "type": "string"
        },
        "scopes": {

--- pinned/tailscale_update_posture_integration
+++ observed/tailscale_update_posture_integration
  {
    "annotations": {
      "destructiveHint": false,
+         "minLength": 1,
          "type": "string"
        },
        "tenantId": {

--- pinned/tailscale_update_tailnet_settings
+++ observed/tailscale_update_tailnet_settings
  {
    "annotations": {
      "destructiveHint": false,
-         "description": "Key expiry duration in days",
-         "type": "number"
+         "description": "Key expiry duration in days (whole days, 1-180)",
+         "maximum": 180,
+         "minimum": 1,
+         "type": "integer"
        },
        "httpsEnabled": {
          "description": "Whether HTTPS certificates are enabled (for tailscale serve/funnel)",

--- pinned/tailscale_update_user_role
+++ observed/tailscale_update_user_role
  {
    "annotations": {
      "destructiveHint": false,
+         "minLength": 1,
          "type": "string"
        }
      },

--- pinned/tailscale_update_webhook
+++ observed/tailscale_update_webhook
  {
    "annotations": {
      "destructiveHint": false,
+         "minLength": 1,
          "type": "string"
        }
      },

Current tools

Watch this server yourself

If you run this server, put the proxy in front of it. It pins these exact fingerprints on first connect and stops the session if they move.

npx -y mcp-pin@0.2.3 -- <your @yawlabs/tailscale-mcp command>

Or subscribe to this page's RSS feed to be told when it changes.

Badge

The badge states one fact about time and nothing else. It never claims a server is safe.

[![mcp-pin](https://mcp-pin.gautamkhosla.com/badge/5ae0ee9fdedd72e3.svg)](https://mcp-pin.gautamkhosla.com/servers/5ae0ee9fdedd72e3.html)